This domain is used to host subdomains that impersonate the legitimate classifieds platform Gumtree. It is likely used for phishing or fraudulent activities targeting users of the impersonated brand.
pay-funds.sbs
Potentially Malicious Unranked
High Risk Detected: Our security engines have flagged this site for malicious behavior, such as brand impersonation or phishing.
We strongly advise using NordVPN’s Threat Protection to automatically neutralize these threats before they can load on your device.
Try NordVPN Threat Protection Affiliate disclosure: We may earn a commission from purchases.
Investigate a specific URL
Community Discussion
View DiscussionsRecent Threat Analysis
URLert analyzed recent scan activity for pay-funds.sbs and found 2 results.
| Status | Target URL | Type | Time |
|---|---|---|---|
| Dangerous | https://gumtree.pay-funds.sbs/67559617859 | 16h ago | |
| Dangerous | https://gumtree.pay-funds.sbs/67559617859 | 17h ago |
Network Infrastructure
Historical and current IP address mappings for this domain.
| IP Address / Infrastructure | Status | Subdomains | Last Seen |
|---|---|---|---|
CLOUDFLARENET (AS13335) | Active | gumtree.pay-funds.sbs pay-funds.sbs | Today |
CLOUDFLARENET (AS13335) | Active | gumtree.pay-funds.sbs pay-funds.sbs | Today |
172.67.190.123
CLOUDFLARENET (AS13335)
Active
gumtree.pay-funds.sbs pay-funds.sbs
Seen Today
104.21.19.238
CLOUDFLARENET (AS13335)
Active
gumtree.pay-funds.sbs pay-funds.sbs
Seen Today
Something wrong?
Developer API
Integrate Domain Intelligence
Access this classification data programmatically via our API.
GET /api/v1/classify?domain=pay-funds.sbs
{
"domain": "pay-funds.sbs",
"confidence": "high",
"category": {
"purpose": "potentially_malicious",
"specialization": "Phishing and Impersonation"
},
"identity": {
"headline": "Malicious domain impersonating Gumtree for phishing",
"summary": "This domain is used to host subdomains that impersonate the legitimate classifieds platform Gumtree. It is likely used for phishing or fraudulent activities targeting users of the impersonated brand.",
"operator": null,
"parent_entity": null,
"topics": [
"phishing",
"impersonation",
"fraud",
"malicious"
]
},
"functions": {
"is_ugc_platform": false,
"is_file_host": false,
"is_url_shortener": false,
"is_public_idp": false,
"is_crypto_platform": false,
"allows_user_subdomains": false,
"is_form_builder": false,
"is_document_host": false
},
"facts": {
"registered_date": "2026-01-28T10:54:02Z",
"rank": null,
"hosting_provider": "CLOUDFLARENET - Cloudflare, Inc."
}
}